10.02.2013 Views

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Compression<br />

policy<br />

in<br />

POPs<br />

You<br />

can<br />

specify<br />

a<br />

compression<br />

policy<br />

of<br />

do<br />

not<br />

compress<br />

in<br />

a<br />

protected<br />

object<br />

policy<br />

(POP).<br />

You<br />

can<br />

attach<br />

the<br />

POP<br />

to<br />

an<br />

object,<br />

and<br />

<strong>WebSEAL</strong><br />

disables<br />

compression<br />

of<br />

that<br />

object.<br />

To<br />

specify<br />

this<br />

policy,<br />

add<br />

the<br />

following<br />

attribute<br />

to<br />

the<br />

POP:<br />

document-compression<br />

=<br />

no<br />

A<br />

POP<br />

without<br />

this<br />

attribute<br />

set,<br />

or<br />

with<br />

this<br />

attribute<br />

set<br />

to<br />

any<br />

value<br />

other<br />

than<br />

no,<br />

allows<br />

documents<br />

to<br />

be<br />

compressed.<br />

For<br />

example,<br />

to<br />

disable<br />

compression<br />

<strong>for</strong><br />

the<br />

junction<br />

/appOne:<br />

pdadmin><br />

pop<br />

create<br />

appOnePop<br />

pdadmin><br />

pop<br />

modify<br />

appOnePop<br />

set<br />

attribute<br />

document-compression<br />

no<br />

pdadmin><br />

pop<br />

attach<br />

/<strong>WebSEAL</strong>/host/appOne<br />

appOnePop<br />

To<br />

allow<br />

compression<br />

<strong>for</strong><br />

a<br />

subdirectory<br />

beneath<br />

/appOne<br />

with<br />

an<br />

overriding<br />

POP,<br />

attach<br />

a<br />

different<br />

POP<br />

that<br />

does<br />

not<br />

have<br />

the<br />

document-compression<br />

attribute.<br />

For<br />

example:<br />

pdadmin><br />

pop<br />

create<br />

dataPop<br />

pdadmin><br />

pop<br />

attach<br />

/<strong>WebSEAL</strong>/host/appOne/data<br />

dataPop<br />

This<br />

method<br />

of<br />

applying<br />

compression<br />

policy<br />

can<br />

be<br />

used<br />

with<br />

URLs.<br />

For<br />

example,<br />

to<br />

disable<br />

compression<br />

based<br />

on<br />

wild<br />

card<br />

patterns<br />

applied<br />

to<br />

URLs,<br />

you<br />

can<br />

use<br />

dynurl.<br />

To<br />

disable<br />

compression<br />

<strong>for</strong><br />

all<br />

requests<br />

to<br />

a<br />

junction<br />

that<br />

have<br />

a<br />

particular<br />

argument<br />

in<br />

the<br />

query<br />

string,<br />

you<br />

can<br />

create<br />

a<br />

dynurl.conf<br />

file<br />

with<br />

entries<br />

like<br />

the<br />

following:<br />

/disableCompression<br />

/appOne/*\?want-response=text/xml<br />

You<br />

can<br />

then<br />

attach<br />

a<br />

pop<br />

to<br />

/<strong>WebSEAL</strong>/host/disableCompression<br />

with<br />

the<br />

document-compression<br />

attribute<br />

set<br />

to<br />

no.<br />

Data<br />

compression<br />

limitation<br />

v<br />

The<br />

transfer<br />

of<br />

compressed<br />

data<br />

between<br />

<strong>WebSEAL</strong><br />

and<br />

backend<br />

servers<br />

is<br />

not<br />

supported.<br />

<strong>WebSEAL</strong><br />

per<strong>for</strong>ms<br />

filtering<br />

on<br />

URLs<br />

<strong>for</strong><br />

various<br />

purposes.<br />

<strong>WebSEAL</strong><br />

does<br />

not<br />

per<strong>for</strong>m<br />

filtering<br />

on<br />

compressed<br />

data.<br />

Data<br />

compression<br />

configuration<br />

To<br />

specify<br />

data<br />

compression<br />

policy<br />

<strong>for</strong><br />

communication<br />

between<br />

<strong>WebSEAL</strong><br />

and<br />

client<br />

browsers,<br />

complete<br />

the<br />

following<br />

steps:<br />

1.<br />

In<br />

the<br />

<strong>WebSEAL</strong><br />

configuration<br />

file,<br />

specify<br />

each<br />

MIME-type<br />

<strong>for</strong><br />

which<br />

a<br />

data<br />

compression<br />

policy<br />

applies.<br />

Assign<br />

a<br />

value<br />

that<br />

en<strong>for</strong>ces<br />

the<br />

policy.<br />

[compress-mime-types]<br />

mime_type<br />

=<br />

minimum_doc_size<br />

Note<br />

that<br />

the<br />

default<br />

setting<br />

leaves<br />

all<br />

data<br />

uncompressed:<br />

[compress-mime-types]<br />

*/*<br />

=<br />

-1<br />

For<br />

more<br />

in<strong>for</strong>mation<br />

on<br />

creating<br />

entries<br />

in<br />

this<br />

stanza,<br />

see<br />

“Compression<br />

based<br />

on<br />

MIME-type”<br />

on<br />

page<br />

80.<br />

2.<br />

In<br />

the<br />

<strong>WebSEAL</strong><br />

configuration<br />

file,<br />

specify<br />

each<br />

type<br />

of<br />

user<br />

agent<br />

(browser)<br />

<strong>for</strong><br />

which<br />

a<br />

data<br />

compression<br />

policy<br />

applies.<br />

Enable<br />

data<br />

compression<br />

by<br />

assigning<br />

the<br />

value<br />

yes.<br />

Disable<br />

data<br />

compression<br />

by<br />

assigning<br />

the<br />

value<br />

no.<br />

82<br />

<strong>IBM</strong><br />

<strong>Tivoli</strong><br />

<strong>Access</strong><br />

<strong>Manager</strong><br />

<strong>for</strong><br />

e-<strong>business</strong>:<br />

<strong>WebSEAL</strong><br />

<strong>Administration</strong><br />

Guide

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!